2.2 KiB
2.2 KiB
| title | description | published | date | tags | editor | dateCreated |
|---|---|---|---|---|---|---|
| Audit - beszel_agents.yaml | Gremlin audit report 2026-04-27 | true | 2026-04-27T11:07:27.254Z | gremlin,audit | markdown | 2026-04-27T11:07:27.254Z |
Audit Report — beszel_agents.yaml
Date: 2026-04-27
File: swarm/beszel_agents.yaml
Type: Docker Swarm
Verdict: FAIL
Audit Summary:
-
Homepage labels:
- The
beszel_agents.yamlfile does not include any homepage labels (homepage.group,homepage.name,homepage.icon,homepage.href,homepage.description). These are typically used in documentation or UI configurations.
Action: Add these labels to your configuration for better visibility and documentation.
- The
-
Uptime Kuma labels:
- The configuration does not include any Uptime Kuma labels (
kuma.<n>.http.name,kuma.<n>.http.url).
Action: If you are using Uptime Kuma, add the necessary labels to your configuration.
- The configuration does not include any Uptime Kuma labels (
-
Caddy labels on exposed services:
- Caddy configuration is not visible in this file. Ensure that any services exposing HTTP/HTTPS endpoints have appropriate Caddy configurations with reverse proxy settings.
-
Placement constraints:
- The
node.hostnameplacement constraint is correctly used for each service. For example,docker2,docker3, etc., are specified as required nodes.
Action: Verify that the specified node hostnames (docker2,docker3, etc.) exist in your Docker Swarm environment.
- The
-
Volumes use
/DockerVol/<service>path convention:- The volumes specified do not follow the
/DockerVol/<service>path convention. For instance,/var/run/docker.sockis used directly.
Action: Update the volume paths to match the specified convention (e.g.,/DockerVol/beszel-agent-docker2/var/run/docker.sock).
- The volumes specified do not follow the
-
Network references external
netgrimoireoverlay:- The network
netgrimoireis referenced correctly as an external network in the configuration.
Action: Ensure that this network exists on your Docker Swarm and has the necessary configurations.
- The network
VERDICT: FAIL
The configuration does not include essential labels for documentation, uses incorrect volume paths, and requires updates to meet specified conventions and constraints.